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INFORMATION  WARFARE: 


EVALUATING  INFORMATION  TARGETS 


INTRODUCTION 


Knowle4iggris  Power'.  Information  Warfare  (IW)  in  its 
broadest  definition  has  existed  since  armed  conflict  began. 
Throughout  history  when  a  combatant  knew  more  about  his  enemy's 
strengths  and  weaknesses,  he  had  the  necessary  conditions  for 
victory.  When  the  combatant  could  then  convert  that  knowledge 
into  a  capability,  he  generated  sufficient  conditions  for 

m 

victory.  The  conversion  of  knowledge  to  capability  is  the 
essence  of  information  warfare.^ 

In  past  conflicts  IW  consisted  of  propaganda,  psychological 
operations  (PSYOPS) ,  deception  and  Command  and  Control  Warfare 
(C^W) .  Today  IW  has  moved  beyond  these  rudimentary  techniques 
and  seeks  to  establish  victory  without  war  as  a  goal.  IW 
properly  applied,  provides  the  capability  to  achieve  that  goal. 

Although  some  may  argue  against  the  likelihood  or 
feasibility  of  such  warfare,  one  only  need  to  recall  that  the 
attrition  wars  of  the  20th  century  did  not  seem  likely  or 
feasible  in  the  17th  or  18th  century.  Winning  the  wars  of  the 
future  will  require  leaders  to  have  the  vision  to  choose 
appropriate  information  targets. 

The  model  proposed  in  this  essay  will  provide  decision 
makers  with  a  tool  to  attack  IW  targets  effectively,  with  the 
proper  degree  of  force,  by  synergist ically  combining  IW 
technology,  organizational  structure  and  mathematical  rigor. 
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’^a^CULTIES  OF  INTEGRATING  IW  TECHNIQUES 

As  combatant  commanders  attempt  to  integrate  IW  techniques 
into  their  arsenal,  they  face  the  same  challenges  that  commanders 
faced  when  artillery,  machine  guns  and  tanks  were  first 
introduced  onto  the  battlefield.  They  suddenly  possessed  new 
technology  that  provided  significant  potential  without  the 
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tactics  or  doctrine  to  employ  them.  The  successful  commanders  of 
the  past  were  those  who  were  able  to  integrate  those  weapon 
systems  and  employ  them  to  achieve  desired  results. 

Commanders  who  thoughtfully  apply  well-understood  IW 
techniques,  and  do  not  indiscriminately  use  technological 
novelties,  will  gain  victory  on  future  battlefields.^  Today's 
commanders  must  establish  a  clear  methodology  to  integrate  IW 
techniques  into  daily  planning  if  they  are  to  achieve  victory. 


available  TCX)LS 

A  report  prepared  by  Science  Applications  International 
Corporation  (SAIC)  proposes  an  organizational  structure  to 
provide  support  to  the  Joint  Command  and  Control  Warfare 
Commander  (JC^WC)  .  The  JC^WC  when  implemented,  would  be  part  of 
the  J-3  and  would  provide  the  required  coordination  among  the 
Intelligence  (J-2),  Operations  (J-3)  and  Communications  (J-6) 
Departments  to  evaluate  IW  targets.^  These  staffs  require 
teamwork  to  meet  the  report's  recommendations  for  a  coordinated 
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way  to  conduct  critical  node  analysis  about  friendly  and  enemy: 

•  commafi^/  control,  communication,  computers  and 
intelligence  (C^I)  nodes 

•  operational  security  (OPSEC)  planning 

•  deception  and  counter-deception  planning 

•  PSYOPS 

•  electronic  warfare  (EW)  ^ 

•  electronic  attack 

•  electronic  protection 

•  destruction  and  overall  C^W  planning 

The  report  provides  a  strong  organizational  foundation  that 
assigns  staff  responsibilities,  principal  interfaces  and 
recommends  input  and  output  data  elements  for  each  of  the 
critical  nodes  listed  above.  The  report  does  not  provide  the 
mathematical  algorithms  to  convert  input  data  elements  to  output 
values.  In  contrast,  the  Center  for  Naval  Analysis  (CNA)  in  a 
classified  report  has  developed  a  method  for  quantifying  the 
value  of  IW  targets  in  military  operations.^  The  methodology  is 
mathematically  sound  and  can  easily  be  generalized  to  include 
more  realistic  scenarios  and  models. 

THE  MISSING  PIECE 

The  commander  now  has  an  advanced  IW  technology,  the  SAIC- 
proposed  structure  for  coordinating  analysis  of  IW,  and  the  CNA 
mathematical  algorithms  for  evaluating  specific  actions  in 
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specific  scenarios.  What  is  missing  is  a  methodology  that 
synergistic^^,  combines  those  three  elements  and  provides 
decision  makers  with  a  quantifiable  starting  point  to  prioritize 
IW  targets.  The  model  adopted  to  perform  this  function  should 
not  be  viewed  as  a  substitute  for  the  decision  maker.  Rather,  it 
is  a  framework  that  uses  a  combination  of  mathematics  and  the 
opinions  of  technical  analysts  to  extend  the  decision  maker's 
judgment  in  making  choices. 

Such  a  model  must  be  transparent.  Transparency  implies  that 
the  decision  maker  can  understand  and  use  the  model  as  an 
extension  of  his  or  her  own  judgment.  All  assumptions  are 
clearly  described  and  held  to  manageable  levels,  and  the 
deductive  process  leading  to  assertions  is  clear.  Appraisal  of 
the  model  also  is  necessary  to  assure  the  decision  maker  that  the 
model  is  mathematically  correct  and  uses  valid  data.  Finally  the 
model  needs  to  be  consistent  to  ensure  that  selection  and 
evaluation  of  targets  are  analyzed  in  the  same  context  and  that 
the  discussion  of  differing  viewpoints  is  based  on  specific 
assumptions. 

THE  PROPOSED  MODEL 

A  model  to  accomplish  this  analysis  of  IW  targets  would 
require  three  dimensions;  a  method  of  employment  (offensive, 
defensive  and  manipulative) ,  a  type  of  attack  (destruction, 
denial  and  deception)  and  a  desired  result  (hard  kills  (H,^) ,  soft 
kills  (S[^)  and  exploitation)  .  The  proposed  model  should  also 
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possess  the  capability  to  compare  all  combinations  of  each  of  the 
elements  of,  these  dimensions. 


EMPLOYMENT  METHODS 

The  employment  methods  of  IW  are  offensive,  defensive  and 
manipulative.  All  three  methods  of  employment  are  useful,  if  hot 
necessary,  throughout  a  campaign  or  major  operation. 

Offensive  IW.  The  offensive  category  of  IW  is  the  heart  of 
an  IW  campaign.  The  purpose  of  offensive  action  is  the  means  by 
which  a  military  force  seizes  and  holds  the  initiative  while 
maintaining  freedom  of  action  and  achieving  decisive  results.® 
Offensive  actions  administer  hard  kills,  soft  kills  and  exploit 
enemy  weaknesses  to  achieve  strategic  and  operational  objectives. 
Examples  of  offensive  IW  weapons  include: 

•  Logic  Weapons  —  viruses.  Electro-  Magnetic  Pulse  (EMP) 
bombs,  flaws,  trap  doors,  RF  weapons,  data  manipulation, 
covert  channels,  etc.’ 

•  Conventional  Weapons  —  rifles  and  bombs.* 

Defensive  IW.  Continuing  the  metaphor,  if  offensive  IW  is 
the  heart  of  an  I W  campaign,  defensive  IW  is  what  keeps  the-; 
arteries  to  the  heart  clear.  Defensive  IW  requires  hardening, 
redundancy,  protection  and  information  denial.  It  is  a  doctrine 
of  war  not  to  assume  the  enemy  will  not  come,  but  rather  to  rely 
on  one's  readiness  to  meet  him;  not  to  presume  that  he  will  not 
attack,  but  rather  to  make  one's  self  invincible.®  Defensive  IW 
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aids  this  preparation.  The  best  defensive  IW  measures  are 
redundancy  ^■fi4?deception . 

Manipulative .  Manipulation  is  the  brains  of  IW.  It  is  the 
skillful  means  of  dealing  with  an  adversary  by  altering  his 
perception  in  a  way  that  puts  him  at  a  distinct  disadvantage. 
Manipulation  profoundly  affects  information  systems  and, 
therefore,  the  knowledge  available  to  make  decisions.  An  example 
of  manipulation  is  the  use  of  non-cooperating  "weapons".  These 
weapons  include  technological  systems  used  for  IW  purposes  which, 
in  some  instances,  occur  without  the  owners'  knowledge.  The  use 
of  CNN  during  Desert  Shield  and  Desert  Storm  is  an  example  of  a 
non-cooperative  weapon.'®  Positioning  is  what  the  Madison  Avenue 
advertising  community  uses  to  make  people  buy  certain  products. 
These  techniques  encourage  or  discourage  certain  behaviors." 
Public  Relations  is  the  art  of  manipulation  that  is  well 
understood  in  politics,  marketing  and  publicity  as  a  way  to  get 
people  to  think  favorably  about  the  subject  of  the  pitch. 

TYPES  OF  ATTACK 

Types  of  attack  include,  destruction,  denial  and  deception. 
The  value  of  each  of  these  is  dependent  on  the  target,  its 
vulnerability  and  the  desired  outcome  of  the  attack. 

Destruction .  In  most  cases  destruction  is  the  easiest  type 
of  attack  to  execute.  The  goal  of  physical  destruction  is  to 
damage  the  target  in  such  a  manner  that  it  prevents  the  enemy 
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from  using  or  rebuilding  the  target.  Although  this  may  be  the 
easiest  type^^ef.  attack  to  perform,  it  may  not  be  the  most 
effective.  In  some  cases  it  may  be  better  not  to  destroy  a 
target,  for  example,  a  telecommunications  system,  that  the  United 
States  can  use  during  post  hostilities. 

Denial.  Denial  prevents  the  enemy  from  using  systems  or 
sensors  without  destruction.  Denial  ranges  from  isolating 
systems  to  temporarily  disabling  them  at  critical  times.  Denial 
is  a  riskier  type  of  attack  than  destruction,  yet  it  can  be 
extremely  beneficial  when  conflict  terminates  and  the  attacked 
systems  are  required  to  attain  the  desired  end  state.  Denial  can 
be  either  covert  or  overt.  Covert  denial  of  services  and 
corruption  is  more  difficult  for  the  enemy  to  detect  than  overt 
denial.  For  example,  a  virus  that  randomly  substitutes  one  digit 
in  spare  parts  requisitions  can  result  in  wrong  items  being  sent 
and  cause  extreme  difficulty  for  the  requester  to  detect  the 
source  of  the  error.  Most  likely  the  requester  will  accept  the 
errors  as  normal  data  entry  problems.  Slowly  increasing  the 
number  of  errors  can  deny  the  enemy  a  reliable  logistics  system.'^ 

Deception.  "AH  warfare  is  based  on  deception. The 
object  of  deception  is  to  deny  an  opponent  knowledge  of  one's 
intentions  and  capabilities,  actual  or  potential,  and  to  provide 
him  with  counterfeit  knowledge  in  as  convincing  a  manner  as 
possible.’^  For  deception  to  be  effective  the  enemy  has  to  do 
three  things,  observe  the  deception,  analyze  the  deception  as 
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reality  and  act  upon  the  deception  according  to  the  deceiver's 
goals.  As  -ag£gtems  increasingly  remove  the  man  in  the  loop,  the 
deception  can  take  place  without  the  enemy  observing  or 
interpreting  it.  The  system  will  automatically  act  on 
information  inserted  into  it.'*  Another  example  of  a  deception 
technique  is  the  Iraqi  forces'  successful  employment  of  weapon 
mock-ups  made  from  synthetic  materials,  coated  with  metallized 
paint  and  containing  thermal  emitters.  These  dummy  targets  on 
Iraqi  territory  received  repeated  attacks  by  coalition  aircraft. 

DESIRED  RESULTS 

Throughout  a  campaign  all  actions  should  contribute  to  the 
desired  end  state.  The  execution  of  IW  techniques  is 
particularly  important  in  this  regard.  The  desired  result  of  an 
IW  attack  falls  into  three  categories,  hard  kill,  soft  kill  and 
exploitation. 

Hard  Kill.  A  hard  kill  destroys  or  permanently  disables  the 
enemy's  IW  capabilities.  Weapons  used  to  achieve  hard  kills 
inflict  physical  damage  on  a  target.  Examples  of  hard  kill 
weapons  include  high  explosives,  Electro-Magnetic  Pulses,  and 
High  Power  Microwaves  (HPM) . 

Soft  Kill.  Soft  kills  degrade  a  system.  Examples  of  soft 
kill  weapons  that  degrade  the  enemy's  IW  capabilities  are 
delaying  information,  creating  confusion,  jamming,  conditioning 
and  misrouting  information.'*  Delaying,  misrouting,  and  jamming 
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are  self  explanatory.  Conditioning  is  a  slow  introduction  of 
errors  inta-^a^^ystem  so  that  enemy  operators  of  the  system  learn 
to  tolerate  the  degradation  as  normal  deficiencies,  much  as  one 
becomes  conditioned  to  cold  temperatures  over  the  course  of  a 
long  winter.  Confusion  is  the  ability  to  randomly  introduce  and 
remove  errors  so  that  the  enemy  is  unsure  of  what  is  a  valid 
output . 

w 

Exploitation.  Exploitation  usually  requires  covert  attacks 
against  the  enemy's  IW  targets.  Exploitation  of  systems, 
including  the  media,  is  an  area  that  can  affect  civilian 
leadership  by  influencing  decisions.  An  effective  campaign  can 
achieve  one  of  the  goals  of  IW,  i.e.,  defeating  the  enemy  before 
battle  begins.  This  is  achieved  by  convincing  the  enemy,  using 
his  own  systems  for  analysis,  that  hostile  acts  are  futile. 
Another  method  of  exploitation  is  saturation  of  the  enemy's  IW 
collection  and  processing  systems .  Overloading  an  information 
system  with  redundant  and  extraneous  data  has  long  been  a 
vulnerability  of  hierarchical  structures  for  command  and  control. 
By  overwhelming  an  enemy's  systems  by  perpetually  generating 
data,  an  attacker  seeks  either  to  slow  down  legitimate  computer 
operations,  incapacitate  the  network  through  gridlock,  or  to 
cause  the  human  receiving  the  avalanche  of  output  to  become 
ineffective.” 
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THE  METHODOLOGY 


The  figure  below  provides  a  framework,  of  the  three 
dimensions  of  IW,  employment  methods,  types  of  attack,  and 
desired  results. 


TYPES  OF 
ATTACK 


DESIRED 

RESULTS 


OFFENSIVE  DEFENSIVE  MANIPULATIVE 


EMPLOYMENT 

METHODS 


The  intent  of  the  model  is  to  aid  the  decision  maker's 
judgment  in  IW  target  selection  when  used  with  the  organizational 
structure  recommended  by  SAIC  and  an  expansion  of  the  CNA 
algorithms . 
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THE  PROCESS 


Steps  Required 

1,  Assign  teams  of  IW  technical  analysts  and  operations  research 
analysts  to  the  JC^WC  within  the  J-3. 

2,  JC^WC  develops  a  set  of  targets  or  a  target  category. 

3,  Based  on  the  CINC' s  guidance  and  J3  plans  the  JC^WC  determines 
attack  category  (offensive,  defensive,  manipulative)”  type  of 
attack  (H^,  S^,  exploitative)  and  desired  outcome  (destruction, 
denial,  deception) . 

4.  Using  the  CNA  study  as  a  guide  the  operations  research 
analysts  formulate  algorithms  to  calculate  target  value. 

5.  Include  only  the  targets  pre-approved  by  the  decision  maker. 

6.  Technical  analysts  review  output  for  inconsistencies  and 
errors  (sanity  check) . 


DETAILED  INSTRUCTIONS  FOR  EACH  STEP 

STEP  1 

Establish  an  appropriate  team  to  build  a  valid  working 
model.  Technical  analysts  from  CIA,  NSA  and  DIA  can  provide 
current  estimates  of  IW  capabilities  of  potential  enemies.  The 
decision  maker  (CINC)  must  bound  the  options  and  target 
categories  to  remain  within  the  scope  of  the  assigned  mission. 

He  can  do  this  in  this  step  or  step  5.  A  disadvantage  of 
bounding  the  problem  early  in  the  process  is  that  such  a  decision 
would  possibly  prevent  the  team  discovering  potential  high  value 
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targets.  The  advantage  to  early  bounding  of  areas  to  explore 
allows  a  more  focused  approach.  The  team  also  requires  operation 
research  analysts  to  develop  an  algorithm  with  proper  weighting 
of  variables.  The  basic  function  would  be: 

V,=  f  (C,  D,)  , 

where  is  the  value  of  target  t. 

Ci  is  the  method  of  employment  (defense,  offense,  manipulative) . 

Aj  is  the  type  of  attack  (destruction,  denial,  deception) 

D^.  is  the  desired  outcome  (H,^  ^  exploitative) 

The  JC^WC  can  aid  in  establishing  measures  and  weighting  factors 
for  targets. 

STEP  2 

Taking  the  target  categories  approved  by  the  CINC,  the  JC^WC 
and  subject  matter  experts  can  develop  specific  target  sets.  The 
four  target  categories  available  for  the  CINC  to  choose  are, 
civilian  leadership,  civilian  infrastructure,  military  leadership 
and  military  infrastructure.  The  annex  explains  these  categories 
in  greater  detail. 

STEP  3 

The  JC^WC  and  technical  experts  can  determine  the  likelihood 
of  a  target  being  attacked  and  develop  probabilities  of  success 
and  failure.  Consideration  of  each  method  of  employment 
(offensive,  defensive  and  manipulative)  is  necessary.  Each  type 
of  attack  (destruction,  denial,  deception)  must  then  be  compared 
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to  the  method  of  employment.  Finally  the  desired  outcome  (H,^, 
and  exploitation)  of  the  attack  must  be  weighed  against  the 
target  category  and  type  of  attack. 

The  following  provides  an  example  to  aid  in  understanding 
the  process:  for  a  target  category,  develop  target  sets,  and  for 
each  target  in  the  set  determine  the  values  for  C^,  and  0,^. 

Example: 

m 

Target  Category  =  Military  infrastructure  in  theater. 

Target  Set  =  logistics  systems,  communication  systems,  etc. 

Using  the  logistics  system  target  (targets  can  be  further 
refined  to  a  specific  logistics  computer  if  desired) ,  assign 
values  for  each  method  of  employment  of  IW  action. 

Cl  =  Offensive  action  against  logistics  system 
C2  =  Defensive  action  for  logistics  system 
C3  =  Manipulative  action  for  logistics  system 

Values  for  type  of  attack 

Di  =  Destruction  of  logistics  system 
D2  =  Denial  of  logistics  system 
D3  =  Deception  of  logistics  system 

Values  for  desired  outcome  of  attack 

Ai  =  Hard  kill  against  logistics  system 
Aj  =  Soft  kill  against  logistics  system 
A3  =  Exploitation  attack  against  logistics  system 

The  values  assigned  may  be  multidimensional,  scaled  values 
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or  probabilities.  An  operations  research  analyst  is  required  to 
formulate  tHe~appropriate  measures. 

STEP  4 

The  operations  research  analyst  must  then  use  the  values  in 
step  3  to  develop  a  function,  f  (C^A^Di^)  ,  to  determine  an  overall 
target  value.  The  basic  formula  is: 


V,=  f(qA^DJ 

Again  for  illustrative  purposes  only, , the  following  is  an 
example  of  how  to  use  the  values  attained  from  step  3  to 
determine  target  values . 


f(CiAiDi)=  .  .  f(C3AiDi)=  Xi9 

f  ( Cj  A2  D3 )  “  X2  ....  ....  ..... 


f(CiA3D3)=  Xg 


f  (C3A3D3)—  X27 


Summing  x^  to  X27  will  produce  the  value  for  a  particular 
target.  The  x^  with  the  highest  value  is  also  the  most  effective 
combination  against  that  target. 


STEP  5 

When  the  CINC  allows  an  unbounded  target  set  in  step  1,  he 
must  then  review  the  results  and  select  target  sets  that  are  most 
appropriate  for  the  assigned  mission. 
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STEP  6 

This  is  the  sanity  check  step.  Have  technical  experts 
review  the  results  from  the  model.  Inconsistent  or  wrong  results 
require  correction  to  the  model,  assignment  of  new  values  or 
development  of  alternative  functions. 

SUMMARY 

In  his  theory  of  war  Clausewitz  emphasized  the  importance  of 
converting  knowledge  into  capability.  With  the  compression  of 
time  and  space  in  the  modern  world  the  importance  of  this 
conversion  increases  in  value.  Today's  decision  makers  must 
convert  knowledge  to  capability  faster  than  the  opponent.  To 
make  this  conversion  the  decision  makers  need  the  latest 
technology,  an  organizational  structure  and  realistic 
mathematical  forecasting  algorithms.  More  importantly  they  need 
a  method  to  combine  those  ingredients  in  a  transparent,  appraised 
and-  consistent  manner.  Imp:lementing  the-  methodology  proposed 
above  will  provide  the  decision  makers  with  a  significant 
advantage  over  their  opponents  in  converting  knowledge  to 
capability,  and  thus  winning  the  IW  campaigns  of  the  future. 
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ANNEX 


TARGET  SETS 

CIVILIAN  LEADERSHIP 

Attacks  on  civilian  leadership  are  attacks  that  disrupt  the 
decision  cycle  for  the  executive,  legislative  and  judicial 
branches.  The  more  sophisticated  a  country  is,  the  more 
sophisticated  the  attacker  must  be  to  achieve  success  that  would 
have  a  direct  effect  on  civil  leadership. 

CIVILIAN  INFRASTRUCTURE 

Throughout  the  public  infrastructure  computer  viruses 
specially  designed  for  use  as  a  weapon  might  easily  bring  a 
modern  computer  dependent  nation  to  its  knees. 

Information  Infrastructure;  Computers,  networks  and  media 
are  self  evident  targets  for  IW. 

Industrial  Base:  Production  lines,  research  and  development 
efforts  and  employment  associated  with  the  industrial  base  are 
potential  high  value  targets. 

Public  Inf rastiucture :  Elements  of  public  infrastructure 
such  as  libraries,  and  local  databases  are  lucrative  targets. 

Public  Transit:  The  classic  lines  of  communication  are 
computerized  in  modern  societies.  Cutting  these  dilutes  or 
denies  the  opponent ' s  ability  to  move  and  creates  chaos  in  the 
system. 
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Economy:  The  economy  is  vulnerable  in  a  variety  of  ways 

including  the  financial  support  infrastructure  (money  transfer 
system) . 

MILITARY  LEADERSHIP 

Command  and  Control  Infrastructure:  The  physical  part  of  a 
Command  and  Control  infrastructure  includes  microwave  antenna, 

m 

switching  stations,  telephone,  radio,  and  modems.  Non-physical 
is  data,  electrical  systems,  and  support  systems. 

MILITARY  INFRASTRUCTURE 

Autonomous  Sensor  System:  Sensors  that  are  designed  to 
operate  autonomously  can  be  exploited  to  send  false  data  back  to 
a  controlling  system. 

C2  Infrastructure:  Infrastructure  includes  the  civilian  and 
strategic  leadership,  the  decision  process,  and  societal  support 
structures.  Attacking  these  can  sow  discord,  thereby  fracturing 
the  decision  making  process. 

Logistics;  Modern  logistics  systems  depend  to  a  high  degree 
on  a  computerized  backbone  that  identifies  supply  requirements, 
positions  material,  tracks  deliveries  and  schedules  resources. 
Attacks  on  this  system  can  severely  affect  the  ability  of  forces 
to  deploy. 

Integrated  Air  Defense:  C'^I,  TV,  radio,  telephone,  fire 
control  computers,  strategic  computer  systems  that  identify 
missile  launches  and  provide  intelligence  are  lucrative  targets. 
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